Skip to content

Commit

Permalink
update metadata
Browse files Browse the repository at this point in the history
Update README and artifacthub-pkg metadata

Signed-off-by: Flavio Castelli <[email protected]>
  • Loading branch information
flavio committed Jan 19, 2023
1 parent bbece27 commit a05f17a
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 19 deletions.
15 changes: 0 additions & 15 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,3 @@
Continuous integration | License
-----------------------|--------
![Continuous integration](https://github.com/kubewarden/readonly-root-filesystem-psp-policy/workflows/Continuous%20integration/badge.svg) | [![License: Apache 2.0](https://img.shields.io/badge/License-Apache2.0-brightgreen.svg)](https://opensource.org/licenses/Apache-2.0)


This Kubewarden Policy is a replacement for the Kubernetes Pod Security Policy
that enforces the usage of [`ReadOnlyRootFilesystems`](https://kubernetes.io/docs/concepts/policy/pod-security-policy/#volumes-and-file-systems).

Expand All @@ -25,13 +20,3 @@ cannot have a `securityContext`.
# Configuration

The policy doesn't have any configuration.

# Obtain policy

The policy is automatically published as an OCI artifact inside of
[this](https://github.com/orgs/kubewarden/packages/container/package/policies%2Freadonly-root-filesystem-psp-policy)
container registry.

# Using the policy

The easiest way to use this policy is through the [kubewarden-controller](https://github.com/kubewarden/kubewarden-controller).
15 changes: 11 additions & 4 deletions artifacthub-pkg.yml
Original file line number Diff line number Diff line change
@@ -1,22 +1,22 @@
---
version: 0.1.3
version: 0.1.4
name: readonly-root-filesystem-psp
displayName: Readonly Root Filesystem PSP
createdAt: '2022-07-19T16:05:52+02:00'
createdAt: '2023-01-19T14:46:21+02:00'
description: A Kubewarden policy that enforces root filesystem to be readonly
license: Apache-2.0
homeURL: https://github.com/kubewarden/readonly-root-filesystem-psp-policy
containersImages:
- name: policy
image: ghcr.io/kubewarden/policies/readonly-root-filesystem-psp:v0.1.3
image: ghcr.io/kubewarden/policies/readonly-root-filesystem-psp:v0.1.4
keywords:
- psp
- container
- filesystem
- volume
links:
- name: policy
url: https://github.com/kubewarden/readonly-root-filesystem-psp-policy/releases/download/v0.1.3/policy.wasm
url: https://github.com/kubewarden/readonly-root-filesystem-psp-policy/releases/download/v0.1.4/policy.wasm
- name: source
url: https://github.com/kubewarden/readonly-root-filesystem-psp-policy
provider:
Expand All @@ -27,3 +27,10 @@ annotations:
kubewarden/resources: Pod
kubewarden/mutation: false
kubewarden/contextAware: false
kubewarden/rules: |
rules:
- apiGroups: [""]
apiVersions: ["v1"]
resources: ["pods"]
operations: ["CREATE", "UPDATE"]

0 comments on commit a05f17a

Please sign in to comment.